What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 131 Stack Exchange communities.

This is more a curiosity than a request (I prefer using my gmail account to log into sites); is there a particular reason that users can't log into the SO family with a Twitter account, or other oAuth services?

My initial thought was that SO only supported openid, but it has a Facebook Connect setup running, which means you have Google, Yahoo, and FB; seems like Twitter is an obvious missing piece here.

I wonder because I was considering trying to setup an oAuth/Twitter sign-in capability for my own site. What's the reasoning there?

share|improve this question

1 Answer 1

up vote 17 down vote accepted

Facebook and Twitter aren't really the same type of provider.

Yes yes, they both use "OAuth" but Facebook uses OAuth2.0 while Twitter uses OAuth1.0a. There is a substantial difference between the two.

In the end, Twitter logins weren't implemented because there's an awful lot of complexity required to do it properly and I think we got a good spread of login providers with just Facebook being added.

Naturally, if Twitter were to make an OAuth2.0 service available I'd be tempted to add it to /users/login.

share|improve this answer
1  
Interesting stuff, I didn't realize Twitter doesn't support oAuth 2.0, I don't support you have any useful links as to how Facebook has their stuff setup? –  Bob Jan 11 '11 at 2:56
2  
@bob the minute Twitter supports OAuth 2.0, we will add them, but not before. OAuth 1.0 is kind of nightmarish. –  Jeff Atwood Jan 11 '11 at 9:55
1  
@Bob - developers.facebook.com/docs/authentication documents Facebook OAuth. Its really, really simple. A basic consumer could probably be written in a dozen lines of code or so; ours is a bit bigger due to dealing with multiple domains (which is weird) and multiple deployment tiers (which is not so weird). –  Kevin Montrose Jan 11 '11 at 12:20
    
@Jeff Understood, I've never used either version so I'll trust your judgement :) @Kevin Cool stuff, thanks for the link! –  Bob Jan 11 '11 at 18:06
2  
I'm pretty sure Twitter now does support oAuth 2.0, perhaps worth revisiting? –  Tim Post Sep 19 '13 at 11:36
    
+1 Cool information. I thought about this, however this is wealthy information. Thank you. –  Praveen Sep 19 '13 at 11:43
    
@TimPost They support application-only OAuth 2.0 (dev.twitter.com/docs/auth/application-only-auth), which is based on the Client Credentials Grant (tools.ietf.org/html/rfc6749#section-4.4). Looks like enough though. –  casperOne Sep 19 '13 at 12:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .